Hakkende lyd og periodiske blåskjermer; Virus?

Patrick de Maar · 28. juni 2007

Hei,

Jeg sliter med periodiske blåskjermer(jeg er usikker, men tror det skjer rundt hver 3. time), og lyden "hakker"(henger etter, lagger) i både spill og musikkavspilling. Har ikke sett på film på en god stund men kan teste dette også om det trengs.

Jeg har gode rutiner når jeg sitter å surfer og det er sjeldent jeg klarer å komme meg innpå sider av det mer tvilsomme slaget som utnytter exploits. (Jeg bruker Opera).

Kjørte Kaspersky Antivirus intil igår, da lisensen min gikk ut. Byttet over til Avast! Home Edition. Har ikke fått kjørt fullskann med Avast! enda, men dette skal gjøres senere på dagen.

Jeg opplever også at min andre disk forsvinner og kommer kun tilbake etter en omstart. Jeg har prøvd ALLE(dvs, de to) SATA-kontrollerene på hovedkortet mitt, og har også prøvd alle 6 SATA-portene, tilfelle det var en port som streiket. Problemet er det fortsatt....

Resten tar jeg i en liten "rapport".

-Ad-aware 2007: Et par ugyldige registernøkler funnet; Fjernet

-Spybot S&D: Ugyldige registerbaner og en trojan/spyware funnet; Fjernet

-Kaspersky AV: Ingenting funnet etter 3timers skann; *check*

-Avast! AV: Ikke kjørt skann enda; *check*

-Registry Mechanic: En god del ugyldige registeroppføringer funnet; Rettet/Fjernet

Hijackthis log:

Klikk for å se/fjerne innholdet nedenfor

Logfile of Trend Micro HijackThis v2.0.0 (BETA)

Scan saved at 14:04:10, on 28.06.2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\MSN Messenger\MsnMsgr.Exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE

C:\PROGRA~1\WHATPU~1\WHATPU~1.EXE

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe

C:\Program Files\Opera\Opera.exe

C:\Program Files\MSN Messenger\usnsvc.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\Winamp\winamp.exe

C:\Documents and Settings\Patrick\Desktop\HiJackThis_v2.exe

C:\WINDOWS\system32\NOTEPAD.EXE

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O4 - HKLM\..\Run: [EasyTuneV] C:\Program Files\Gigabyte\ET5\ETcall.exe

O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup

O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [skyTel] SkyTel.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [startCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe

O4 - HKCU\..\Run: [WhatPulse] C:\PROGRA~1\WHATPU~1\WHATPU~1.EXE

O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033

O4 - HKCU\..\Run: [HDDHealth] C:\Program Files\HDD Health\HDDHealth.exe -wl

O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Startup: MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe

O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: mental ray 3.5 Satellite (32-bit) (mi-raysat_3dsmax9_32) - Unknown owner - D:\auto\mentalray\satellite\raysat_3dsmax9_32server.exe (file missing)

--

End of file - 5412 bytes

Nanoscan "logg"

Klikk for å se/fjerne innholdet nedenfor

Scan result

Summary: Your PC doesn't have viruses

Dangerous Threat: (0)

Time: 9 seconds

Antivirus: ALWIL Software avast! antivirus 4.7.1001 [VPS 000752-3] (active and up-to-date)

Spytter på med hardware i tilfelle dere trenger å vite det:

Gigabyte GA-965P-S3

Radeon X1950GT

1Gb GeiL DDR667

C2D E6400

Om det er noe mer informasjon dere trenger er det bare å skrike ut!

Tusen takk på forhånd.

PS: Jeg er klar over at dette kan være et hardwareproblem, og ber da om at tråden flyttes, ikke slettes/stenges..om en moderator skulle komme over den.

Endret 28. juni 2007 av PatrickM

Thor. · 28. juni 2007

Jeg vil foreslå at du prøver http://www.nanoscan.com/

Kjør i explorer eller firefox og scan pc en

Patrick de Maar · 28. juni 2007

Her kommer "loggen" fra nanoscan.

Scan result

Summary: Your PC doesn't have viruses

Dangerous Threat: (0)

Time: 9 seconds

Antivirus: ALWIL Software avast! antivirus 4.7.1001 [VPS 000752-3] (active and up-to-date)

Supplerer denne også i førsteinnlegget.

28. juni 2007

Hei.

Last ned SAS, installer og oppdater programmet. Kjør en 'complete scan'.

Når SAS er ferdig å scanne så legger du ut en ny Hijackthis logg sammen med SAS loggen (preferences->statistics/logs)

Patrick de Maar · 29. juni 2007

SAS

Klikk for å se/fjerne innholdet nedenfor

SUPERAntiSpyware Scan Log

http://www.superantispyware.com

Generated 06/28/2007 at 10:29 PM

Application Version : 3.9.1008

Core Rules Database Version : 3262

Trace Rules Database Version: 1273

Scan type : Complete Scan

Total Scan Time : 00:40:56

Memory items scanned : 631

Memory threats detected : 0

Registry items scanned : 4950

Registry threats detected : 0

File items scanned : 39368

File threats detected : 9

Adware.Tracking Cookie

C:\Documents and Settings\Patrick\Cookies\[email protected][2].txt

C:\Documents and Settings\Patrick\Cookies\patrick@cgi-bin[1].txt

C:\Documents and Settings\Patrick\Cookies\[email protected][1].txt

C:\Documents and Settings\Patrick\Cookies\[email protected][2].txt

C:\Documents and Settings\Patrick\Cookies\patrick@serving-sys[1].txt

C:\Documents and Settings\Patrick\Cookies\[email protected][1].txt

C:\Documents and Settings\Patrick\Cookies\patrick@2o7[2].txt

Adware.WhenU

C:\PROGRAM FILES\DAEMON TOOLS\SETUPDTSB.EXE

C:\SYSTEM VOLUME INFORMATION\_RESTORE{DFA35F7B-BD67-4178-A17A-9EF497E3454E}\RP129\A0084530.EXE

Hijackthis

Klikk for å se/fjerne innholdet nedenfor

Logfile of Trend Micro HijackThis v2.0.0 (BETA)

Scan saved at 14:24:00, on 29.06.2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe

C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\MSN Messenger\MsnMsgr.Exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE

C:\PROGRA~1\WHATPU~1\WHATPU~1.EXE

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe

C:\Program Files\MSN Messenger\usnsvc.exe

C:\Program Files\Opera\Opera.exe

C:\Program Files\Winamp\winamp.exe

C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe